07f1a54dab6304bb61b44477c7f74d296b67e2c1303147aa436221fcf24b996a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 09:47

Target

2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe
Size

985KB
MD5

d1420da406cdd875818d42527162926a
SHA1

4af83fb81996aab78d3a72ed7190fabd763669f0
SHA256

07f1a54dab6304bb61b44477c7f74d296b67e2c1303147aa436221fcf24b996a
SHA512

51f8876088d3be931345c3dea385f712ae69a7ac71963ee458f255a072874f9018db30406b9d93718002695461aeaed32c8ebb194964f418b16b37f78ab42033
SSDEEP

24576:Hrr4FBDn2XkU/bleQfB96gYj+bES1D4dcAbPuRKOHdwiEJak:Lr4FBj2LBCj+Yq4dzdO9bEJak

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1036	2356	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 1036	2356	2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe	16
PID 2356 wrote to memory of 1036	2356	2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe	16
PID 2356 wrote to memory of 1036	2356	2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe	16
PID 2356 wrote to memory of 1036	2356	2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe	16

C:\Users\Admin\AppData\Local\Temp\2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-03_d1420da406cdd875818d42527162926a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 44
  2⤵
  - Program crash
  PID:1036

memory/2356-2-0x0000000000BB0000-0x0000000000CB5000-memory.dmp

Filesize
1.0MB

Download
memory/2356-1-0x0000000000BB0000-0x0000000000CB5000-memory.dmp

Filesize
1.0MB

Download
memory/2356-3-0x0000000000BB0000-0x0000000000CB5000-memory.dmp

Filesize
1.0MB

Download
memory/2356-0-0x0000000000BB0000-0x0000000000CB5000-memory.dmp

Filesize
1.0MB

Download
memory/2356-4-0x0000000000BB0000-0x0000000000CB5000-memory.dmp

Filesize
1.0MB

Download